ab

UBS KeyLink
Quick reference –
WEB Installation Guide
Table of contents

1. Introduction 3
1.1. Why is an Installation needed? 3
1.2. Is UBS KeyLink secure? 3
1.3. Information about Secure Sockets Layer (SSL)
Encryptions 3

2. Installation and Start of UBS KeyLink 4

2.1. Before Installation 4
2.2. Java Runtime Environment 4
2.3. Start UBS KeyLink 4
2.4. Proxy and Firewalls 5

3. Key contact information 7

1. Introduction

This installation guide will help you with the setup of all 1.3. Information about Secure Sockets Layer (SSL)
necessary UBS KeyLink components. Encryptions

1.1. Why is an Installation needed? Digital certificates encrypt data using Secure Sockets Layer
(SSL) technology, the industry-standard method for protecting
You might ask yourself why an installation is needed for a web communications. The SSL security protocol provides
WEB application. The reason is that UBS KeyLink is based on data encryption, server authentication, message integrity, and
Java, a modern and highly sophisticated software platform optional client authentication for a TCP / IP connection.
that enables many advanced features. For your Internet brow- Because SSL is built into all major browsers and web servers,
ser to support these features, a plug-in has to be installed. simply installing a digital certificate turns on their SSL capabi-
Details about all these components will be explained in this lities.
document.
An SSL certificate is a string of information (often stored as a
1.2. Is UBS KeyLink secure? text file) that is used by the SSL protocol to establish a secure
connection. SSL server certificates contain information about
Our security concept uses the latest encryption software the owner, a unique serial number or other unique identifica-
combined with tried-and tested authorization characteristics. tion characteristics, valid dates and an encrypted “finger-
This combination provides UBS KeyLink users with a high print” that can be used to verify the contents of the certificate.
degree of security, while ensuring that our service is as user-
friendly as possible. SSL is a widely spread security solution for Internet based
applications.
As a credited, independent certification institution, VeriSign
Incorporated has confirmed the identity of UBS AG as a
financial institution and has thereby granted our institution a
financial certificate. A Financial Certificate is a Server Certifi-
cate that is issued through a credited certification institution.
These certificates permit the use of a strong 256-bit encryp-
tion.

3
2. Installation and Start of UBS KeyLink

2.1. Before Installation 2.3.1 Certificates

Please refer to the “System Requirements” document prior While logging in for the fist time, two certificates will appear.
to installing anything on your computer. You will find this Both of these certificates are UBS approved and are needed
information on the UBS KeyLink Internet page. for the secure and proper use of the UBS KeyLink application.

2.2. Java Runtime Environment The first certificate is for Java Security
Please grant the permissions to UBS KeyLink to access your
UBS KeyLink works with the Sun Java Runtime Environment local data by selecting “Grant Always” for the Java certificate.
(JRE). The current recommended versions; JRE 6 update 43 is
available on our website under Download Software.

We recommend the use of this version, as older or newer

versions may currently not be supported.

Important to note: Before starting UBS KeyLink you must

install this software first, otherwise the programme will not
run on your computer.

2.2.1 Installation of the Java Runtime Environment

After the successful download, start the file named:

“jre-6u13-windows-i586-p” on your local computer to install
the Sun JRE 6 update 43.

2.3. Start UBS KeyLink

The second certificate which appears is for the SSL
After the successful installation of the JRE, you may start Please grant the permissions to UBS KeyLink to accessing your
UBS Homepage KeyLink. local data by selecting the “Accept this certificate forever
(until it expires)” option for the SSL certificate.
At the top of the right hand menu, you will see the Login links:

• Customers with accounts held in Switzerland should use

the link “UBS KeyLink Switzerland – KeyLink Login with
Access Card“.
• Customers with accounts held outside Switzerland should
use the link “UBS KeyLink International – KeyLink Login
with Access Card“.

The login screen to UBS KeyLink will appear and you can login
into the system by entering your Access Card ID Number
(KL Number).

4
Once you have accepted both certificates, the UBS KeyLink 2.4.1 How to know if a manually configuration of
main menue, which lists all the Module options on the left Proxy setting are needed
hand side of the screen, will be launched.
UBS KeyLink upon start-up will read your machine’s Proxy
For more detailed information on the various Module options, configurations, likewise it will detect if your Proxy settings
please refer to our UBS KeyLink User Guide by selection the need to be configured. Should your proxy settings need ad-
“Help” function once you have accessed UBS KeyLink. justment, you will receive the following error message:

If you are starting UBS KeyLink for the very first time, the Key-
Link files will be downloaded automatically to your local hard
disk. Having the KeyLink files on your hard disk makes starting
UBS KeyLink faster and does not require you to download all
the files from the KeyLink server.

2.4. Proxy and Firewalls

If you have a Proxy or a Firewall in your environment some

additional steps are necessary to run UBS KeyLink.

For enterprise customers it is important to be able to set up a

secure computing environment within your companies. For this
reason, proxy configuration is an essential part of securing a
safe environment. Proxy configuration acts as a security barrier, Should this error message appear, you will need to manually
it ensures that the proxy server monitors all traffic between configure your Proxy settings, and should either click on
the Internet and the intranet. This is normally an integral part the button marked “Proxy settings” or go to the Java Control
of security enforcement in corporate firewalls within intranets. Panel (recommended for most users).

Enterprise customers who want to use Java Plug-in to deploy If you do not receive an error massage, your browser settings
applets on their intranet web pages may also set up proxy the are sufficient and no proxy adjustments need to be made.
relevant support. This support is required for the Java Plug-in
to work in an intranet environment and can be set up
through the Java Plug-in Control Panel.

If you do have a proxy or a firewall in your environment, you

will have to manually configure your proxy. UBS KeyLink does
not support automatic proxy configuration.

5
2.4.2 Adjust the Proxy settings Please keep in mind that the secure proxy server has only to
be defined if UBS KeyLink needs different proxy settings from
You can adjust the Proxy settings either from the Java control your web browser.
panel or by clicking the “Proxy Settings” button from the
error messages when prompted in UBS KeyLink. Please contact your web system administrator and ask for either
the network name or the IP-address and the port of the secure
To configure from the Java Control Panel: proxy server you need to access the Internet.
It may be necessary to manually enter your Proxy Name and
Proxy Port into the JAVA Plug-In Console. To configure from UBS KeyLink:
(Found under “Start g Settings g Control Panel, Java”). You also have the option to adjust your proxy settings directly
in UBS KeyLink by selecting the “Proxy Settings” button when
In the “Proxies” tab adjust the browser default settings or over- you receive the above mentioned error message.
ride the proxy address and port for the different protocols.
You can override the default settings by un-checking the “Use In doing so, the following dialog box will appear:
browser settings” check box, then completing the proxy
information table beneath the check box. You can enter the
proxy address and port in each of the supported protocols.

The same rules apply here as in the Java Control panel. You
may either choose the Java Plug-in settings defined in the
Java Control panel, or manually enter a different proxy server.

If you have questions regarding your proxy set up, you can
access this information by quickly checking your proxy settings
in UBS KeyLink. To open the “Proxy Settings” information
screen, enter the word “PROXY” in the “User Identification”
field and select “OK”.
Click on the “Network Settings“ tab to override the network
settings in your browser.

This action will open the “Network Settings” window:

Please also ensure that you keep your operating system and
Internet browser updated with the latest security features and
supporting updates.

Please be advised that various configuration changes to your

company’s firewall may apply.

6
3. Key contact information

To find out how UBS KeyLink e-banking solutions can benefit

you, please contact UBS AG, UBS KeyLink.

Global Toll Free Numbers

Global Helpline Number +41-848-888 848

Regional Helpline Numbers1

Americas +1-203-719 3800
Europe, Middle East and Africa +41-44-239 0607
Asia-Pacific +65-6495 8740

e-mail UBS KeyLink International

[email protected]

e-mail UBS KeyLink Switzerland

[email protected]

1
Our regional helpline numbers are staffed between the hours of 8:00 am to 6:00 pm local time. Calls to our Europe, Middle East, and Africa number (+41-44-239 0607) outside
of Swiss operating hours, will be redirected to another helpline number outside of Switzerland.

© UBS 2013. The key symbol and UBS are among the registered and unregistered trademarks of UBS. All rights reserved.